Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 2 subscribers
  • Views 3728 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

FATAL Error

HadiNazarlou
Hi
I have a problem with IPS, i don't have access to the internet when i enable the IPS.
the IPS' logs show me this ERROR!
 "FATAL ERROR: /etc/snort/rules/astaro.rules(249) Cannot use the fast_pattern content modifier for a lone http cookie/http raw uri /http raw header /http raw cookie /status code / status msg /http method buffer content."
please help me Thank you.


This thread was automatically locked due to age.
Parents
  • 0
    loginuser@192.168.0.1's password: 
    Last login: Fri May 10 21:48:10 2013 from 192.168.42.132


    Sophos UTM
    (C) Copyrights by Astaro and by others 2000-2013.
    For more copyright information look at /doc/astaro-license.txt
    or http://www.astaro.com/doc/astaro-license.txt

    NOTE: Any modifications done by root will void your support.
          Please use WebAdmin for any configuration changes.

    loginuser@utm:/home/login > su
    Password: 
    utm:/home/login # ls /var/chroot-snort/etc/snort/rules/
    classification.config  gen-msg.map         reference.config
    decoder.rules          preprocessor.rules
    utm:/home/login # find / 2>&1 | grep 'astaro.rules'
    utm:/home/login # 





    You stand corrected. [;)]
Reply
  • 0
    loginuser@192.168.0.1's password: 
    Last login: Fri May 10 21:48:10 2013 from 192.168.42.132


    Sophos UTM
    (C) Copyrights by Astaro and by others 2000-2013.
    For more copyright information look at /doc/astaro-license.txt
    or http://www.astaro.com/doc/astaro-license.txt

    NOTE: Any modifications done by root will void your support.
          Please use WebAdmin for any configuration changes.

    loginuser@utm:/home/login > su
    Password: 
    utm:/home/login # ls /var/chroot-snort/etc/snort/rules/
    classification.config  gen-msg.map         reference.config
    decoder.rules          preprocessor.rules
    utm:/home/login # find / 2>&1 | grep 'astaro.rules'
    utm:/home/login # 





    You stand corrected. [;)]
Children
  • 0 in reply to jeff.welling
    loginuser@utm:/home/login > su
    Password: 
    utm:/home/login # ls /var/chroot-snort/etc/snort/rules/
    classification.config  gen-msg.map         reference.config
    decoder.rules          preprocessor.rules
    utm:/home/login # find / 2>&1 | grep 'astaro.rules'
    utm:/home/login # 

      
    Hi Jeff
    Yes this has been running and this is a new problem! and my SSH was not enable. Also i didn't edit anything via SSH and i use the WebAdmin always. i Re-install Firmware and restore a backup but i want to know the cause of this Error. Oh by the way Dear Jeff What is these Command??! i didn't understand!?? [:S]